Ubuntu 14.04 LTS : Apport vulnerability (USN-2782-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2782-1 advisory. Gabriel Campana discovered that Apport incorrectly handled Python module imports. A local attacker could use this issue to elevate privileges. Tenable has extract...

USN-2782-1 apport vulnerability

Gabriel Campana discovered that Apport incorrectly handled Python module imports. A local attacker could use this issue to elevate privileges...

USN-2782-1: Apport vulnerability

Gabriel Campana discovered that Apport incorrectly handled Python module imports. A local attacker could use this issue to elevate privileges...

UBUNTU-CVE-2015-1341

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function pythonmodulepath...

CVE-2015-1341

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function pythonmodulepath...

PT-2015-5221

Name of the Vulnerable Software and Affected Versions Apport versions prior to 2.19.2 Description The issue concerns Apport, where any Python module in sys.path can be imported under specific conditions. This occurs when the command line of the process triggering the coredump is Python and the...

OracleVM 3.3 : net-snmp (OVMSA-2015-0099)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Quicker loading of IP-MIB::ipAddrTable 1191393 - Quicker loading of IP-MIB::ipAddressTable 1191393 - Fixed snmptrapd crash when '-OQ' paramete...

PT-2015-4815

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA version 8.5.0-ise-147 Description The issue is related to the improper restriction of the pickle Python module during tunnel-status checks, allowing local users to execute arbitrary Python code and gain...

CVE-2015-0693: Improper Input Validation

Cisco Web Security Appliance WSA devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via a crafted pickle file, aka Bug ID CSCut39259...

Gnupg2 Information Disclosure Vulnerability

GnuPG is a Python module that allows, from a Python program, to conveniently use the key management, encryption and signing features of GnuPG. GnuPG memcpy uses overlapping scopes, allowing attackers to exploit vulnerabilities to obtain sensitive information...

CVE-2014-8165

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object...

CVE-2014-8165

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object...

CVE-2014-8165

CVE-2014-8165 affects the powerpc-utils-python package used by PowerKVM. The root cause is unsafe use of Python’s Pickle in amsnet.py (AMS server/client path), enabling remote code execution when unpickled data is processed. IBM bulletin lists PowerKVM 2.1 and 3.1 as affected; remediation is to u...

Gnupg2 '/sm/minip12.c' Double Free Denial of Service Vulnerability

GnuPG is a Python module that allows, from a Python program, to conveniently use the key management, encryption and signing features of GnuPG. A denial of service vulnerability exists in Gnupg2 '/sm/minip12.c', which can be exploited by an attacker to launch a denial of service attack...

[SECURITY] Fedora 20 Update: python-eyed3-0.7.4-4.fc20

A Python module and program for processing ID3 tags. Information about mp3 filesi.e bit rate, sample frequency, play time, etc. is also provided. The formats supported are ID3 v1.0/v1.1 and v2.3/v2.4...

[SECURITY] Fedora 19 Update: python-eyed3-0.7.4-4.fc19

A Python module and program for processing ID3 tags. Information about mp3 filesi.e bit rate, sample frequency, play time, etc. is also provided. The formats supported are ID3 v1.0/v1.1 and v2.3/v2.4...

CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

CVE-2014-5340

The wato component in CheckMK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL...

CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...

CVE-2014-0485

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in 1 common.py or 2 local.py in backends/...